CVE-2026-96293

Status: Received

Description

A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.

Published
October 22, 2026 9:17 AM
Last Modified
October 22, 2026 11:17 AM
Source
5d1c2695-1a31-4499-88ae-e847036fd7e3

Weaknesses (CWE)

CWE-312 CWE-532 CWE-732

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry